More IT- / Cyber-Security through Security Engineering

Security Engineering starts with the system planning in order to meet the required security requirements and to be able to react quickly and correctly to attacks. Prevention instead of Reaction

01

Complete access control

Access authorizations are only given after explicit approval

02

The reduction to the absolutely necessary access privileges

Each program and each authorized user should only be assigned as many access rights as absolutely necessary

03

The reduction of complexity

Protocols and features should be checked to see whether they are necessary for the system to function properly

04

The Distribution of access privileges

The “need-to-know” principle usually describes data classification systems and is also suitable as a general approach to system configuration

Security Engineering is a very technical thing. You can roughly compare this to a firewall system. Firewall means = Everything is forbidden until it is allowed. With Security Engineering = Everything is allowed until it is forbidden. Security Engineering should help you to reduce attack vectors by eliminating vulnerabilities from the outset. In principle, Security Engineering is a simple basis for System Hardening. Security or System Hardening is – however – something more than just Engineering and goes into much deeper in Detail